TITLE OF THE INVENTION 

Semiconductor Memory^ Device Internally Provided with Logic 
Circuit which can be Readily Controlled and Controlling Method Thereof 
BACKGROUND OF THE INVENTION 
5 Field of the Invention 

The present invention relates to semiconductor memory devices and, 
more specifically, to a semiconductor memory device internally provided 
with a logic circuit and a controlling method thereof. 
Description of the Background Art 
10 Fig. 53 is a diagram showing a pin arrangement of a conventional 

synchronous dynamic random access memory (SDRAM) having a capacity of 
64 Mbit and a bus width of 16 bits. 

Fig, 54 is a table showing terminal names and functions of the 
SDRAM. 

15 Referring to Figs. 53 and 54, the conventional SDRAM is enclosed in 

a package having 54 pins as terminals. The conventional SDRAM 
includes: a terminal CLK receiving a master clock; a terminal CEJE receiving 
a clock enable signal; a terminal /CS receiving a chip select signal; a 
terminal /RAS receiving a row address strobe signal; a terminal /CAS 

20 receiving a column address strobe signal; and a terminal /WE receiving a 
write enable signal. 

The conventional SDRAM further includes: terminals DQO to DQ15 
receiving and outputting a data input/output signal; a terminal DQM (U/L) 
inputting/outputting an output disable signal /write mask signal; terminals 

25 AO to All receiving an address; terminals BAO, BAl receiving a bank 

address; a terminal VDD supphed with a power supply potential; a terminal 
VDDQ supplied with a power supply potential for output; a terminal VSS 
supplied with a ground potential; and a terminal VSSQ supplied with a 
gi'ound potential for output. 

30 As shown in Fig. 53, the pins for data input/output and power supply 

sources are arranged from as pins 1 to 13 and 42 to 54. The pins for control 
signals and clock signals are arranged as pins 15 to 19 and 37 to 39. 
Address input pins are arranged as pins 20 to 35. Such a terminal 
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arrangement has generality to some extent, and is commonly used for a 

circuit board in a system provided with a memory. 

Fig. 55 is a diagram showing a structure of a conventional DRAM 

provided with a logic. 
5 Referring to Fig. 55, a chip 50 1 has a DRAM 504 and a logic 508, and 

is also provided with terminals for inputting or outputting control signals 

/RAS, /CAS, /CS, an address signal ADD, and a data signal DATA for 

accessing the DRAM. 

Chip 501 further includes terminals for inputting control pins CTRO, 
10 CTRl specific to a logic and a request signal REQ requesting the logic for 

access, and a terminal for outputting a strobe signal STRB used by the logic 

to notify an external portion of completion of a process. 

Conventionally, for controlling logic 508, a special pin has been 

arranged. Thus, a greater number of pins are required for a general 
15 purpose DRAM as shown in Fig. 53, or a controller for controlling the DRAM 

with a logic must be prepared to form a system on a board. As a result, 

generality for connection to a general microcomputer is impaired, or a 

special command for the microcomputer must be used to control the system. 

SUMMARY OF THE INVENTION 
20 An object of the present invention is to provide a semiconductor 

memory device provided with a logic circuit capable of controUing a logic 

portion by a method similar to that used by a general purpose DRAM. 

In short, the present invention is a semiconductor memory device 

provided with a terminal group, memory cell array, and logic circuit. 
25 The terminal group receives an externally appUed control signal, 

address, and data. The memory cell array transmits/receives data to/from 

a region designated by the address in accordance with the control signal. If 

the control signal, addi'ess, and data are applied to the terminal group in a 

sequence of applying the control signal, address, and data to the memory cell 
30 array, when the address designates a prescribed first region, the logic circuit 

performs a data process in accordance with at least one of the control signal, 

address, and data. 

According to another aspect of the present invention, a method of 
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controlling a semiconductor memory device is provided which has a 
designating step and a step of ^ppl)dng a command. 

The semiconductor memory device is provided with a terminal group, 
memory cell array, and logic circuit. The terminal group receives an 
5 externally applied control signal, address, and data. The memory cell 

array transmits/receives data to/from a region designated by the address in 
accordance with the control signal. If the control signal, addi'ess, and the 
data are apphed to the terminal group in a sequence of applying the control 
signal, address, and data to the memory cell array, when the addi^ess 
10 designates a prescribed first region, the logic circuit performs a data process 
in accordance with at least one of the control signal, address, and data. 

In the designating step, the first region is designated as a reserved 
region. In the step of applying command, the first region is designated by 
the addi-ess in a sequence of writing to the memory cell array and a 
15 command is apphed to the logic circuit. 

According to still another aspect of the present invention, a 
semiconductor memory device is provided which includes a first terminal 
group, second terminal, memory, and logic circuit. 

The first terminal group receives an externally apphed control signal, 
20 address, and data. The second terminal receives an externally apphed 

select signal. The memory includes a pluraHty of memory cells arranged in 
a matrix and is activated in accordance with the select signal for 
transmitting/receiving data to/from a region designated by the addi^ess in 
accordance with the control signal. The logic circuit is activated in a 
25 manner complementary to the memory in accordance with the select signal 
for performing a data process in accordance with at least one of the address 
and the data. 

Therefore, a main advantage of the present invention is that the 
internally provided logic circuit can be controlled by applying a signal in a 
30 sequence of applying the data, addi-ess, and control signal to the general 
purpose memory, and control is facihtated without having to significantly 
change existing systems. 

Another advantage of the present invention is that a semiconductor 
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memory device internaEy provided with a logic can readily be controlled in a 
microcomputer system. ^ 

Still another advantage of the present invention is that control of an 
internally provided logic circuit can be performed by effectively using a path 
of applying an address and data to an internal memory with the minimum 
number of additional control terminals. 

The foregoing and other objects, features, aspects and advantages of 
the present invention will become more apparent from the following detailed 
description of the present invention when taken in conjunction with the 
accompanying drawings. 
BRIEF DESCRIPTION OF THE DRAWINGS 

Fig. 1 is a block diagram showing a configuration of a semiconductor 
memory device 1 according to a first embodiment of the present invention. 

Fig. 2 is a diagram showing an exemplary memory map of the 
semiconductor memory device with a logic according to the first 
embodiment. 

Fig. 3 is a diagram shown in conjunction with transmission of an 
externally input signal to a logic circuit. 

Fig. 4 is a waveform diagram shown in conjunction with a general 
timing of the semiconductor memory device of the first embodiment. 

Fig. 5 is a block diagi^am showing a configuration of a DRAM 10 with 
a logic according to a modification of the first embodiment. 

Fig, 6 is a diagram showing a memory map of DRAM 10 with logic 
shown in Fig. 5. 

Fig. 7 is a block diagi^am showing a configuration of a DRAM 30 with 
a logic according to a second embodiment. 

Fig. 8 is a diagram showing a memory map of a system appfied to the 
DRAM with logic of the second embodiment. 

Fig. 9 is a diagram shown in conjunction with cryptosystems 
supported by a cipher operation logic 74 shown in Fig. 7. 

Figs. 10 to 18 are first to ninth diagrams each showing exemplary 
data allocated to a register. 

Fig. 19 is a diagram showing that a DRAM 92 with a logic of the 



present invention is connected to a microcomputer 90. 

Fig. 20 is a flow chart showing a process of controlling the DRAM 
with logic. 

Fig. 2 1 is a diagram showing a memory map according to a fourth 
embodiment. 

Fig. 22 is a diagram showing a configuration of a DRAM 11 with a 
logic according to a fifth embodiment. 

Fig. 23 is a diagram showing a memory map of a microcomputer 
system of the fifth embodiment. 

Fig. 24 is a diagram showing operation waveforms shown in 
conjunction with control of the DRAM with logic according to the fifth 
embodiment. 

Fig. 25 is a diagram shown in conjunction with a modification of the 
fifth embodiment. 

Fig, 26 is a diagram showing operation waveforms shown in 
conjunction with the operation of the modification of the fifth embodiment. 

Fig, 27 is a block diagi^am showing a configuration of ScRAM200. 

Fig, 28 is a diagi'am shown in conjunction with a transition in the 
state of a memory map according to a setting of a control register. 

Figs. 29 to 31 are first to third diagrams shown in conjunction with a 
mode register 208 of Fig. 27. 

Fig. 32 is a diagram showing a state transition associated with 
cipher control entry/exit of the ScRAM. 

Fig. 33 is a diagram showing exemplary operation waveforms for 
access by the control register. 

Figs. 34 to 37 are first to fourth diagrams each showing an address 
map of the control register. 

Fig. 38 is a diagram shown in conjunction with a system capable of 
controlling a terminal for appl5dng a signal CRYP. 

Figs. 39 and 40 are first and second diagi^ams shown in conjunction 
with a system unable to control a CRYP terminal. 

Fig, 41 is a diagram showing operation waveforms used for 
explaining setting to the control register. 



Figs. 42 to 44 are first to third schematic diagrams shown in 
conjunction with a basic unit in an encryption process. 

Figs. 45 to 47 are first to third schematic diagrams showing a unit in 
a decryption process. 
5 Figs. 48 and 49 are first and second diagrams shown in conjunction 

with an ECB mode. 

Fig. 50 is a diagram shown in conjunction with an operation in a 
CBC mode. 

Figs. 51 and 52 are diagrams respectively shown in conjunction with 
10 encryption and decrjT)tion in the CBC mode. 

Fig. 53 is a diagram showing a pin arrangement of a conventional 
synchronous dynamic random access memory (SDRAM). 

Fig. 54 is a table showing terminal names and fimctions of the 
SDRAM. 

15 Fig. 55 is a diagram showing a configuration of a conventional 

DRAM with a logic. 

DESCRIPTION OF THE PREFERRED EMBODIMENTS 

Now, the embodiments of the present invention will be described in 

detail with reference to the drawings. It is noted that the same reference 
20 characters indicate the same or corresponding portions throughout the 

di*awings. 

First Embodiment 

Fig. 1 is a block diagram showing a configuration of a semiconductor 
memory device 1 according to a first embodiment of the present invention. 

25 Referring to Fig, 1, semiconductor memory device 1 includes: a 

terminal for receiving control signals such as /RAS, /CAS, /CS, AVE; a 
terminal for receiving an address signal ADD; a terminal for receiving a 
data signal DATA; an interface portion 2 outputting to an internal portion a 
control signal in accordance with control signals /RAS, /CAS, /CS, /WE, 

30 address signal ADD. and data signal DATA; a DRAM receiving an output 

from interface portion 2 for operation; a register 6 holding data or command 
applied from interface portion 2; and a logic circuit 8 performing an 
operation such as signal processing in accordance with outputs from register 

-6- 



6 and interface portion 2. 

The terminals of semiconductor device 1 are only those used by a 
general purpose DRAM. Thus, the same package as that of a chip of the 
general purpose DRAM can be used. For example, a package having a pin 
5 arrangement as shown in Fig. 53 is used. 

Accordingly, when semiconductor memory device 1 of the present 
invention is used with an existing application, there is no need to re-design a 
board or develop a special control LSI (Large Scale Integrated circuit), but 
the existing general purpose DRAM is only replaced. Namely, mere change 
10 of a software adds a new function since it is pin-compatible with the general 
purpose DRAM. Examples of new functions include a circuit for processing 
images at high speed or a logic circuit for performing such a process as 
encryption that cannot be rapidly performed by a microcomputer. Control 
signals may be input by using several unused terminals, e.g. NC (Non 
15 Connection) pins of a package enclosing the general purpose DRAM, such as 
pins 36 and 40 in Fig. 53,. 

Now, a controUing method will be described in detail. A so-called 
memory mapped I/O method is apphed to control of the logic circuit. 
Fig. 2 is a diagi'am showing an exemplary memory map of the 
20 semiconductor memory device internally provided with a logic of the first 
embodiment. 

Referring to Fig. 2, assume that a capacity of the DRAM on the chip 
is 64Mbit, having a bus width of 16 bits. The DRAM has X addresses XO to 
X13 and Y addresses YO to Y7. Thus, memory addi*esses that controls 

25 8Mbyte are Oh to SFFFFFh. 

The general purpose DRAM can write/read data to/from any portion 
of the address space. The space allowing writing and reading of data is 
referred to as a DRAM space. In the present invention, a specific region is 
designated as a logic control region for the logic circuit. For example, the 

30 space corresponding to addresses Oh to IFh is allocated as the logic control 
region. The capacity of the logic control region is for example 512Byte of 
256 X 2Byte. A command or mode for controlling the logic can be selected in 
accordance with data written to the address space. 
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Although the region is allocated to the least significant side of 
addresses in Fig. 2, the logic control region to be allocated to the most 
significant side (SFFFFFh to SFFFEOh). If an SDRAM is used in place of 
the DRAM, the region for the address may be selected when a mode register 
5 is set. If the logic control region is not allocated when the mode register is 
set, it can be used as a general SDRAM having 64Mbit. 

Fig. 3 is a diagi^am shown in conjunction with transmission of an 
externally input signal to the logic circuit. 

Referring to Fig. 3, interface portion 2 includes: a buffer 3 receiving 

10 control signals /RAS, /CAS, ICS, AVE, an addi^ess signal ADD., and a data 
signal DATA; and a decode circuit 5 receiving and decoding an output from 
buffer 3. A register 6 holds information such as a mode or command in 
accordance with an output from decode circuit 5. Based on the held 
information, a logic circuit 8 is controlled. 

15 Decode circuit 5 decodes address signal ADD and data signal DATA, 

but in some cases directly store data written to the logic control region 
designated by the address signal in register 6. When the register consists 
of an SRAM (Static Random Access Memory) or the hke, data may be stored 
in the region of the SRAM designated by address signal ADD. A part of the 

20 region of the DRAM may be used as a holding circuit in place of register 6, in 
which region data for controlling the logic circuit would be held. 

Fig, 4 is a diagi^am of waveforms shown in conjunction with a 
general timing of the semiconductor memory device of the first embodiment. 
Fig. 4 relates to an operation of successively writing or reading eight data in 

25 the SDRAM capable of inputting and outputting from a data input/output 

terminal. A bit number of data which are successively read is referred to as 
a burst length and, in the SDRAM, the bit number can be generally changed 
by the mode register. 

Referring to Fig. 4, at a time tl, external control signals (row address 

30 strobe signal /RAS, column addi'ess strobe signal /CAS, addi^ess signal ADD 
and the hke) are incorporated at a rising edge of an external clock signal 
ext.CLK (e.g., a system clock). Since row address strobe signal /RAS is at 
an L level in an active state and column address strobe signal /CAS and 
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write enable signal AVE are at an H level, it means that a row active 
command ACT is input. Address signal ADD at that time is incorporated 
as a row address Xa. 

At a time t2, column address strobe signal /CAS attains to the L level 
5 in the active state and is incorporated in synchronization with the rise of 

clock signal ext.CLK. A combination of column address strobe signal /CAS 
at the L level and row address strobe signal /RAS and write enable signal 
/WE both at the H level corresponds to a read command READ. Address 
signal ADD at that time is incorporated as a column address Y. 
10 When the region designated by the address is the DRAM space in 

Fig. 2, a row and column selecting operation is performed in DRAM 4 of Fig. 
1 in accordance with these incorporated row address Xa and column address 
Yb. 

When row address Xa and column address Yb are in the logic control 
15 region of Fig. 2, a prescribed region of register 6 is selected rather than the 
row and column of DRAM 4 of Fig, 1. For example, in the prescribed region, 
a flag indicating an operation state of logic 8 or an operation result of logic 8 
is stored. 

D/Q indicates data signal DATA input/output through the data 
20 input/output terminal. The first data qO is output at a time t3 when a 

prescribed clock period (6 clock cycles in Fig. 4) is elapsed after the fall of 
row addi-ess strobe signal /RAS to the L level and, data ql to q7 are 
successively output following data qO. The data is output in response to the 
fall of clock signal ext.CLK. 
25 The output data is data held in DRAM 4 or a content of register 6. 

The content of register G is for example a flag indicating the operation state 
of logic 8 or an operation result of logic 8. 

After a time t4, a writing operation is performed. At t4, row active 
command ACT is input and row address Xc is incorporated. At a time t5, 
30 when a combination of column address strobe signal /CAS and write enable 
signal /WE both at the L level in the active state and row address strobe 
signal /RAS at the H level, i.e., a write command WRITE is applied, a 
column address Yd is accepted at the rising edge of clock signal ext.CLK and 
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data do, applied at that time, is accepted as initial write data. 

If the region designated hy tjie address is the DRAM space of Fig. 2, 
the row and column selecting operation is performed in the SDRAM in 
response to the fall of row address strobe signal /RAS and the column 
5 address strobe signal /CAS. Subsequently, input data dl to d7 are 

sequentially incorporated in synchronization with clock signal ext.CLK and 
written to the corresponding memory cell. 

When the region designated by row address Xc and the column 
address Yd is the logic control region of Fig. 2, a prescribed region of register 
10 6, rather than the row and column of DRAM 4 of Fig. 1 , is selected. In this 
case, input data dl to d7 are data to be written to the prescribed region of 
register 6. For example, image data processed by logic 8, process data such 
as cipher data, and command data designating an operation such as reset or 
start of process are applied. 
15 Modification of First Embodiment 

Fig. 5 is a block diagram showing a configuration of a DRAM 10 
internally provided with a logic according to a modification of the first 
embodiment. 

Referring to Fig. 5, DRAM 10 with logic includes: an interface 12 
20 receiving control signals /RAS, /CAS, /CS, an address signal ADD, and 
data signal DATA; a DRAM 4 operating in accordance with an output from 
interface portion 12; registers 14, 16 holding data for control in accordance 
with an output from interface portion 12; and logic circuits 18 and 20 
operating in accordance with the data for control respectively held in 
25 registers 14 and 16. 

Fig. 6 is a diagram showing a memory map of DRAM 10 with logic 
shown in Fig. 5. 

Referring to Fig. 6, addresses Oh to IFh of address space Oh to 
3FFFFFh of 64 Mbit correspond to a logic control region to which a control 
30 command or data to a logic circuit 18 is written. Addresses 20h to 2Fh 
correspond to a logic control region to which a command or data to logic 
circuit 20 is written. 

Thus, a memory mapped I/O space is divided into a plurality of 
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portions for controlling a plurality of logic circuits. 
Second Embodiment 

Fig. 7 is a block diagram showing a configuration of a DRAM 30 
internally provided with a logic according to the second embodiment. 

Referring to Fig. 7, DRAM 30 with logic includes an SDRAM portion 
32, and a logic portion 34. 

SDRAM portion 32 includes: an interface portion 36 receiving an 
external signal and accordingly outputting a control signal; and a DARM 
core 38 holding data in accordance with an output from interface portion 36. 
Interface portion 36 includes: a control signal input circuit 40 receiving 
control signals ICS, /RAS, /CAS, AVE and DQM; a clock buffer 44 receiving 
clock signal CLK and clock enable signal CKE for generating an internal 
dock; an address buffer 46 incorporating address signals AO to An in 
synchronization with an output from clock buffer 44; and an input/output 
circuit 52 for inputting/outputting data signals DQO to DQn in 
synchronization with the internal clock. 

Interface portion 36 further includes: a control circuit 42 outputting 
command signals ACT, PRE and the Hke in accordance with an output fi^om 
control signal input circuit 40; and a multiplexer 48 multiplexing an output 
firom address buffer 46 as X and Y addresses in accordance with an output 
from control circtiit 42. 

Multiplexer 48 includes a mode register 50 which can be set in 
accordance with a signal bit of any of address signals AO to Am under a 
mode register set (MRS) command. 

DRAM core 38 includes: a memory ceU array 54 having memory cells 
arranged in a matrix; a row decoder 56 for selecting a row of memory cell 
array 54 in accordance with a row address apphed from multiplexer 48; a 
row decoder 56 for selecting a column of memory cell array 54 in accordance 
with the column address applied from multiplexer 48; and a sense amplifier 
driver + write driver 60 reading/writing from/to the selected memory cell. 

Logic portion 34 includes: a cipher operation logic 74; and a register 
portion 72 holding mode information used for controlling cipher operation 
logic 74, data to be input to the cipher operation logic, and an operation 
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result of the cipher operation logic, in accordance with an output from 
interface portion 36. , . 

Register portion 72 includes; a selector 76 activated when a region 
designated by address signals AO to Am has a prescribed value for 
5 incorporating an externally input data signal through input/output circviit 
52; a control register 78, mode register 80, and data register 84 for writing 
externally applied data through selector 76; and a status register 82 and 
data register 86 holding data output from the cipher operation logic and 
reading the held data as data signals DQO to DQn through selector 76 and 
10 input/output circuit 52. 

Fig. 8 is a diagram showing a memory map of a system applied to the 
DRAM with logic according to the second embodiment. 

Referring to Fig. 8, an external RAM region in the system memory 
map corresponds to the DRAM with logic. The DRAM with logic is divided 
15 into a logic control region and a DRAM region, and controls a cipher logic by 
accessing the logic control region. The region on the system memory map 
corresponding to the logic control region is a system reserved region. When 
a cache of a CPU and an MMU (Memory Management Unit) are used, it 
would be a region where use of cache memory is inhibited (hereinafter 
20 referred to as a cache inhibit region). To prevent an operating system from 
being loaded onto this region, control is preliminary performed by a 
firmware of the system. In addition, control is also performed so that a 
general application program cannot use this region. 

The logic control region corresponds, for example, to row address X = 
25 3FFFh and column addresses Y = OH to FFh of the DRAM. 

Control register 78 of Fig. 7 corresponds to X =8FFFh, Y =00h. 
Mode register 80 corresponds to X = 3FFFh, Y = Olh. Status register 82 
corresponds to X = 3FFFh, Y = 02h. First data register 84 corresponds to X 
3FFFh, Y = 03h. Second data register 86 corresponds to X = 3FFFh, Y = 
30 04h. 

In this example, a page (Y = OOh to FFh) of X = 3FFFh is aUocated to 
the control command region. Accordingly, when X = 3FFFh is input when 
inputting an ACT command in the configuration of Fig. 7, the multiplexer is 
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controlled to enable access to register portion 72. Further, an enable signal 
of the register or a clock for con,trollm.g the register is activated. In this way, 
power consumed by register portion 72 except during input of the control 
command can be reduced. In addition, since register portion 72 has been 
already activated even if a read or write command is input to the page of X = 
3FFFh, access to the register is not delayed. 

Cipher operation logic 74 of Fig. 7 is internally provided with an 
accelerator of major cryptosystem used for ensuring security over a network. 
Cipher operation logic 74 supports a function of a pubhc key cryptosystem 
used for electronic authorization and a secret key cryptosystem used for data 
communication after authorization. The data processing is performed by a 
logic circuit dedicated to encrjrption, so that the data processing is performed 
at higher speed with less power consumption than in the case of a general 
purpose CPU. As such, it is suitable for a battery driven system or the like. 

Fig. 9 is a diagram showing cryptosystems supported by cipher 
operation logic 74 of Fig. 7. 

Referring to Fig. 9, cipher operation logic 74 supports RSA as a 
pubUc key cryptosystem, and supports DES and Triple-DES as a secret key 
cryptosystem. Further, in the secret key cryptosystem, each of major block 
encryption modes ECB (Electric Code Book), CBC(Cipher Block Chaining), 
OFB (Output Feed Back), CFB(Cipher Feed Back) is supported. Cipher 
operation logic 74 performs a critical process for encrjnption to enhance 
adaptivility of the apphcation. The other processes are performed by a 
software on the side of the microcomputer controUing DRAM 30 with logic. 
The most remarkable feature is that cipher control can be implemented in a 
pin-compatible manner with a general purpose SDRAM. 

Now, allocation to each register in the logic control region shown in 
Fig. 8 will be described. 

Figs. 10 to 18 are diagrams shown in conjunction with data allocated 
to the register. 

Referring to Figs. 7 and 10, for control register 78 corresponds to 16 
bits of DO to D15 stored at Y =0h. An encryption function is reset by 
writing 1 to bit DO. Namely, a process of applying a reset pulse 
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corresponding to a prescribed period of time to cipher operation logic 74 is 
performed. When bit Dl is 1, it means that cipher operation logic 74 is in a 
process of encryption. Thus, when externally accessing the cipher 
operation logic, it must be confirmed that a flag apphed to bit Dl is 0 before 
accessing. 

Control register 78 is used for both the pubhc and secret key 
cryptosy stems. 

Next, several exemplary registers used for control in the secret key 
cryptosystem wiU be described. 

Referring to Figs. 7 and 11, for an address Y = Ih, a mode register 80 
is allocated. Bits Dl and DO of 16 bits are used for selection of the 
cryptosystem. If these two bits are "01," the encryption method is DES. If 
they are "10," the encryption method is triple DES. If they are "00," the 
encryption method is held. 

Bits D5 to D2 are used for selection of a block encr5rption mode. If 
the bits are "0001," ECB is designated as the block encryption mode. If 
they are "0010," CBC is designated. If they are "0100," OFB is designated. 
If they are "1000," CFB64 is designated. If they are "0000," the block 
encryption mode is held. 

Bits D8 to D6 are used for selection of a data process mode 
designating a unit amount during an encrjrption process. If these bits are 
"001," a normal mode is designated in which the process is performed with a 
unit of 8 bytes. If they are "0 10," a block mode is designated in which the 
process is performed by a block unit used for designation of the block length. 
If they are "100," a buffer mode is designated in which information stored in 
the buffer is collectively processed as a unit. If they are "000," the data 
process mode is held. 

Thus, 16 bits of 1 address and 2 bytes data at Y = Ih can be allocated 
to a plurality of modes. Accordingly, even if there are a plurahty of modes 
to be designated, by effectively utihzing combinations of 2^^, the designation 
of the operation mode can be performed by a single access. 

Referring to Figs, 7 and 12, status register 82 corresponds to address 
Y = 02h. For bits Dl and DO of the status register, "01," "10," and "00" 
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respectively represent encryption, decryption and holding. For bits D5 and 
D4, "0 1 " 10" and "00" respectively represent starting input of a plain text or 
cryptogram, stopping input, and holding. 

Bit D9 to D6 represent a text length in one block of OFB, CFB. 

Referring to Figs. 7 and 13, Y addresses 3h to 6h correspond to a 
region in which a key of DES having 64 bits or the like is stored. 

Referring to Figs. 7 and 14, first data register 86 corresponds to a 
region in which a key used for Triple-DES is stored. It corresponds to the 
region at addresses Y= 7h to Ah. 

Although each of data registers 84 and 86 looks like a single register, 
it is actually formed of a plurality of registers, being a kind of first in first 
out (FIFO) memory. 

Examples of registers include a register for setting an initial vector 
as shown in Fig. 15 although not shown in Fig. 7, a register for setting a 
block length as shown in Fig. 16, a register for designating the number of 
buffers as shown in Fig. 17, a register for indicating buffer ID as shown in 
Fig. 18 and the like. 

It is noted that, for a pubHc key method, e.g., an RSA encryption 
process, the region of Y = 12h to iFh is reserved. In the case of the pubhc 
key method, a result of an encryption process is held in the internally 
provided register, so that access to the DRAM region is permitted even 
during encryption. 

When row address X read by the ACT command with respect to the 
SDRAM is BFFFh, multiplexer 48 detects it and activates selector 76. Then, 
the register to be accessed is selected when column address Y is input by the 
read command or write command. Then, externally input data is written to 
the register through input/output circuit 52. 

In the second embodiment, the address region designated as the 
logic control region is BFFFOOh to 3FFFFFh. However, the DRAM with 
logic of the present invention can be mounted on various microcomputer 
systems if addresses to be allocated can be changed in the multiplexer in 
accordance with the content of register 50 of Fig. 7 which can be set by a 
mode register set instruction. If the addresses are not allocated by the 
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mode register set instruction, the DRAM with logic of the present invention 
can be used as a general 64M-bit SDRAM, For use as a general SDRAM, a 
bit for determining if the internal logic is to be used or not may be added in 
the mode register. 

Third Embodiment 

Fig. 19 is a diagram showing that DRAM 92 with logic of the present 
invention is connected to microcomputer 90, 

Microcomputer 90 includes a CPU core 94, a cache memory 96, a 
memory controller 98, and an external bus interface circuit 100, which are 
interconnected by an internal bus 102. External bus interface circuit 100 
outputs a control signal, address signal, and data to the DRAM with logic in 
accordance with an instruction from CPU core 94. Thus, external bus 
interface circuit 100 and DRAM with logic 92 are connected by a control 
signal bus for transmitting control signals /RAS, /CAS, /CS and the like, 
an address bus for transmitting address signal ADD. and a data bus for 
transmitting data DATA, 

To control DRAM 92 with logic in such a system, attention must be 
paid to some features of a software operating on microcomputer 90. 

Fig. 20 is a flow chart showing a control process of the DRAM with 

logic. 

Referring to Fig. 20, first, at a step Si, an address for a logic control 
region is allocated to a reserved region. Namely, it is prevented that a 
program is allocated onto an address space for controlling a command with 
respect to a logic circuit. For this purpose, the logic control region can be 
designated as the reserved region with use of a function of an OS (Operation 
System), for example. 

Care must be also paid at the start of the OS to prevent allocation to 
the logic control region of a kernel per se, which is a core of the OS for 
performing basic control of the system such as memory management, 
interruption management and communication between processes. 
Accordingly, the reserved region is designated on the side of the OS while 
pajdng attention to prevent allocation of the kernel per se to the logic control 
region. 
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Then, in a step S2, the logic control region is designated as a cache 
inhibit region in a system with a data cache. 

Namely, even if a prescribed address space is designated and data 
corresponding to a command is transmitted to internal bus 102 with respect 
to DRAM 92 from CPU core 94 in Fig. 19, operation of a cache memory 96 
may cause data corresponding of that command to be written to cache 
memory 96 and not transmitted to DRAM 92 with logic. In this case, the 
logic circuit of DRAM 92 is prevented from performing its operation in 
accordance with the command. Thus, a setting must be made to prevent 
cashing of the logic control region. In most microcomputers, control for 
designating a part of address space as an uncachable region. 

If a memory management unit function is provided, a setting is made 
to prevent use of a virtual address space in the logic control region. 

Thus, in a system with a cache memory, it is set, at the initial setting 
of the system, that use of the cache memory is prevented for the logic control 
region of the DRAM and access thereto is always assured. 

Then, in a step S3, normal write to the allocated region allows a 
command to be input for logic control. In a step S4, normal read enables 
checking of a processing state of the logic or reading of the processing result. 
Further, if the process has not yet been finished in a step S5, steps S3 and 
S4 are repeated. More specifically, as stated in conjunction with Fig. 10, by 
checking a flag which has been written to bit Dl at address Y = Oh, the 
process state can be determined. By checking this flag, the microcomputer 
can confirm completion of the process to move onto the next step of for 
example, access to the operation result. 

Accordingly, the present invention enables checking of the flag state 
by general normal read with respect to the SDRAM, while the completion of 
the process is conventionally notified to the receiver by dedicated pins. 

Fourth Embodiment 

In the first to third embodiments, a part of the space of the DRAM 
memory mounted on the chip is designated as a space for controlling a 
command. Thus, the allocated portion cannot be used as a main memory of 
the microcomputer system. 
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In the fourth embodiment, a ghost space is designated for control. 
Fig. 21 is a diagram shpwing.a memory map of the fourth 
embodiment. 

Referring to Fig. 21, given that a DRAM used is an SDRAM having a 
capacity of 64Mbit and a bus width of 16 bits, X addresses are XO to X13, and 
Y addresses are YO to Y7. One more terminal of X address is added, where 
a region of X14 = "0" is a real memory space, and a region of X14 = "1" is a 
ghost space. A part of this dummy ghost space without any memory is 
designated as the logic control region. Some measures are taken for the 
space to assure direct access as described in the third embodiment. 

One additional terminal for X14 is used, but an unused terminal, if 
any, of the package may be used. For example, NC terminals such as pins 
40 and 36 of Fig. 53 may be used. Although address X14 is added in Fig. 21, 
1 bit of Y address may be added. Namely, the region of Y8 = 0 may be used 
as a DRAM space, and the region of Y8 = 1 as a ghost space. In the DRAM, 
X and Y addresses are generally multiplexed and the X address has a 
greater number of bits. Thus, when the Y address is added, no additional 
terminal is necessary. 

In the foregoing description, the logic control region is allocated to a 
portion of the ghost space. If the ghost space is read, an operation may be 
performed on data stored at an address of the corresponding real space for 
output, or the data at that address may be changed. More specifically, if 
access is made with X14 = 1, a some kind of data processing may be 
performed on data in the real space at the corresponding address of X14 = 0. 
In this case, Y8 address may be added instead of X14 address. Although 
X14 = 1 corresponds to a ghost space, X14 = 0 may correspond to the ghost 
space and X14 = 1 may correspond to the real memory space. In the case of 
adding Y8 address, similarly, Y8 = 0 may correspond to the ghost space and 
Y8 = 1 may correspond to the real memory space. 
Fifth Embodiment 

Fig. 22 is a diagram showing a configuration of a DRAM 111 
internally provided with a logic according to the fifth embodiment. 

Referring to Fig. 22, DRAM 111 with logic includes a terminal for 
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applying signals WE_L, ADD_L, in addition to terminals for controlling an 
address ADD,, data DQ, clock signal CLK, and control signals /RAS, /CAS, 
/CS, AVE for controlling a general DRAM 114. 

DRAM 111 with logic further includes a general DRAM 114, a 
5 register 116 holding a prescribed control signal, and a logic circuit 118 
operating based on held information in register 1 16. 

Namely, a control space can be freely set with a minimum number of 
terminals for control. In Fig. 22, an additional control terminal is used for 
inputting control signals WE_L, ADD_L. The additional terminals may be 
10 allocated to NC pins such as 36 pin or 40 pin shown in Fig. 53. 

When control signal ADD_L is at an L level, a DRAM access mode is 
set. When control signal ADD_L attains to an H level, DRAM 114 is 
inactivated and register 116 is enabled to receive signals and logic 118 
enters an operation mode. 
15 Fig, 23 is a diagram showing a memory map of a microcomputer 

system according to the fifth embodiment. 

Referring to Fig. 23, Oh to SFFFFFh are allocated to a DRAM space. 
There are 14 bits of X addresses XO to X13 and 8 bits of Y addresses YO to Y7. 
As address bits used for designating the DRAM space in the microcomputer 
20 system, AO to A2 1 can be used in total. 

Then, when the terminal used for inputting control signal ADD„L is 
connected to an address bit A23 of the microcomputer system, SOOOOOh to 
803FFFh can be allocated to the logic control region. More specifically, a 
range allocatable to the logic control region refers to a range enabhng 
25 designation as X addresses of the DRAM by the maximum number of 
terminals used for inputting addresses, i.e., Oh to 3FFFh. This is the 
maximum range which can be designated as address when the address bit 
A23 is set to "1" and the address multiplex method is not used. In practical 
use, the ceihng of the logic control region may be set as necessary. 
30 Note that, if there is a possibihty that the microcomputer may use 

another address region which is designated with address bit A23 = "1," a 
chip select signal /CS must be activated with respect to the DRAM with logic 
only when accessing the logic control region (SOOOOh to 803FFFh). 
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Fig. 24 is a diagram showing operation waveforms for controlling the 
DRAM with logic according to the fifth embodiment. 

Referring to Fig. 24, general access to the DRAM is performed in 
synchronization with a clock signal CLK before a time tl. 
5 When control signal ADD_L attains to the H level at tl, a command 

control mode with respect to the logic circuit is entered. Subsequently, data 
is input/output with respect to a register designated by address signal ADD 
in synchronization with clock signal CLK. In the case of Fig. 24, added 
control signal AVE_L is at the L level, so that a command is input to a 
''ilO register for controlling a command. 
CO Modification of the Fifth Embodiment 

1 5^ Fig. 25 is a diagram showing a modification of the fifth embodiment, 

i J When a microcomputer 132 accesses an address space of a general 

I'i DRAM, a memory controller 136 multiplexes and outputs an address 

^ 15 designated by CPU core 134 to an address bus transmitting address signals 
O AO to A13 using a multiplex circuit 140. 

f t However, as shown in Fig. 23, if the logic control region is allocated 

I J to a region different from the DRAM space, memory controller 136 directly 

ri outputs the address from external bus interface circuit 140 without using 

20 multiplex circuit 140. 

In this case, the address is designated by a method similar to that 
employed in the SRAM using address signals AO to A14 of address signals 
AO to A20, which correspond to the number of pins made valid after being 
multiplexed. Then, signals A14 to A20 are in a so-called "Don't* Care" state, 
25 i.e., they may be in any state. When such address signals AO to A20 are 

designated upon activation of /CS, DRAM 121 with logic performs a process. 

Note that, if there is a possibihty that the microcomputer may use 
another address region of address bit A23 = "1", chip select signal /CS must 
be activated with respect to the DRAM with logic only when accessing the 
30 logic control region (SOOOOOh to 803FFFh). 

In such a case, DRAM 121 is provided with an ATD (Address 
Transition Detect) circuit 130 which detects a transition in address at a part 
of register 126. 
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Fig. 26 is a diagram showing operation waveforms used for 
explaining the operation of tha modification of the fifth embodiment. 

In this case, before tl, control signal ADD__L is at the L level and a 
general access to the DRAM is performed. When ADD_L attains to the H 
5 level, a command control mode with respect to the logic circuit is entered. 

At the time, if AVE_L is at the L level, a write mode is designated. If AVE_L 
is at the H level, a read mode is designated. 

When an address ADD designated by address signals AO to Al3 is 
changed, ATD circuit 130 detects the change and generates an internal 
10 operation clock independent of clock signal CLK for writing a signal apphed 
to DQ to an internal command register or reading the content of the register 
designated by the address from the DQ terminal. 

As described above, by connecting a terminal for receiving control 
signal AVE_L of semiconductor memory device 121 and a terminal for 
15 outputting a signal A23 which is output for controlling the SRAM on the side 
of microcomputer 132, the need for a special functionahty on the side of the 
microcomputer is ehminated if semiconductor memory device 121 is 
controlled as the SRAM. The microcomputer can control the logic circuit in 
semiconductor memory device 121 if a general command for writing or 
20 reading data with respect to a memory such as an external extended SRAM 
is executed. 

Sixth Embodiment 

In the sixth embodiment, a more specific DRAM internally provided 
with a cipher logic will be described. The DRAM with the cipher logic will 
25 be hereinafter referred to as a security SDRAM (ScRAM). 

Fig. 27 is a block diagram showing a configuration of an ScRAM 200. 

Referring to Fig. 27, ScRAM 200 includes: a clock buffer 202 
receiving an external clock signal CLK; an input/output buffer 204 for 
transmitting/receiving a data signal DQ to/from an external portion; and an 
30 input buffer 206 externally receiving an address signal ADD, command 
signal CMD, and signal CRYP. 

ScRAM 200 further includes: a mode register 208 holding operation 
mode information in accordance with an output from input buffer 206; a 
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DRAM control address counter 210 for controlling the ScRAM in accordance 
with the outputs from input buffer 2Q6 and mode register 208; and a DRAM 
portion 212 performing a data holding operation under control of DRAM 
control address counter 210. 

Input/output buffer 204 and DRAM portion 212 are connected by an 
internal bus mbus [15:0]. DRAM portion 2 12 has a plurality of banks, each 
including a memory array, row decoder, column decoder, sense amplifier, 
and input/output control circuit. 

ScRAM 200 further includes a selector 214, registers REGO, REGl, 
REG2, counters 220, 224, a control circuit 222, and a cipher logic 228. 

Parameters at the time of mode register set (MRS) which is a control 
command for the SDRAM are stored in mode register 208. Not only the 
mode setting of the SDRAM, but also the setting of enable/disable of access 
to control registers REGO to REG2, can be designated to be stored. When 
the MRS command is input, control registers REGO to REG2 and cipher logic 
228 are reset. 

ScRAM 200 has three types of control registers REG to REGS for 
controlling a cipher logic function. 

Control register REGO is used for holding a command or a mode that 
controls a cipher logic. Control register REGl is used for holding an input 
data of the cipher logic. Control register REGl has a maximum capacity of 
4kb. 

Control register REG is used for holding an output result of the 
cipher logic. Control register REG2 also has a maximum capacity of 4kb. 

Now, a method of accessing control registers REGl to REG2 will be 
described. 

By accessing the control register from an external portion, control of 
the cipher logic in ScRAM 200, input/output of data, and control a mode for 
lower power consumption can be performed. 

Fig. 28 is a diagram shown in conjunction with a change in the state 
of a memory map according to the settings of the control register. 

Referring to Fig. 28, there are two methods of controlling the cipher 
function of the ScRAM. 
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In the first method, 1 is externally input as a control register access 
enable signal CRYP. Thus, a.page of X = #3FFF becomes a control register 
region. 

In the second method, if control register access enable signal CRYP 
5 has 0, 1 is input as address bit AlO when an MRS command for setting the 
mode of the SDRAM is input. In this case, if address bit Al 1 has 0, the 
page of X = #3FFF becomes a control register region. When address bit Al 1 
is 1, a page of X - #0000 becomes a control register region. 

When the control register of the ScRAM is not used, by setting 0 to 

10 AlO, a general MRS command for setting the mode of the SDRAM is input. 
In this case, control register accessing enable signal CRYP must be 0. 
When tRSC is elapsed after the input of signal CRYP and MRS command, 
the ScRAM can operate with respect to new commands. 

When access to the control registers is enabled, by writing/reading 

15 predetermined data to the address space of a specific row address (X = 

#3FFF or X = #0), control registers REGO to REG2 can be accessed. During 
that time, 4-kbit address space allocated to logic control cannot be used as a 
memory. The other part of the space can be externally accessed as a 
general memory region. 

20 Here, if the address space for the control register access is externally 

accessed, DRAM portion 212 would not be accessed. Thus, once the enable 
state of the control register access ends, the memory space corresponding to 
the specific row address in the control register region can be accessed as a 
general memory space. The value which has been set to the register before 

25 the end of enable state of the control register access is finished is held if the 
operation mode is finished by setting signal CRYP to 0. However, if the 
operation state is finished by using the MRS command, the value which has 
been set to the register is reset. Namely, the register can be reset by 
inputting the MRS command. 

30 Control registers REGO to REG2 can be accessed by access in the 

same sequence as that of a general purpose SDRAM in the address space 
allocated to the control registers. Read data from the control registers are 
output with the same CAS latency which is set at the time of setting the 
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mode register of the SDRAM, however, the burst length at the time of 
accessing the control registers is fixed at 1. 

Now, mode register 208 of Fig. 27 will be described. 

Figs. 29, 30 and 31 are diagrams shown in conjunction with mode 
register 208 of Fig. 27. 

Referring to Fig. 29, a mode register setting instruction is apphed by- 
setting all of signals /CS, /RAS /CAS and AVE of command signal CMD to an 
L level at the time of the rise of a clock signal CLK. The values set by 
address bits BAO, BAl, and AO to All included in address signal AD are 
written to respective bits shown in Fig. 30. Note that address bits A8 and 
A7 are set to 0. The other bits are allocated to various settings as shown in 
Fig. 31. 

The mode register enables the mode setting of the SDRAM, setting of 
the low power mode of the SDRAM, and access to the control registers. 

In mode setting of the SDRAM, the burst length, burst type and 
/CAS latency can be programmed. 

In setting the low power mode of the SDRAM, precharge standby 
current in non -power down mode can be reduced. Note that, use of this 
mode requires the setup time of the input signal of at least 5 ns. 

In accessing the control registers, if bit AlO is set to 1 at the time of 
mode register setting, a register space for controlling a cipher function is 
obtained. This method does not enable control of a terminal for inputting 
signal CRYP, and hence is suited to a system with the terminal being fixed 
to 0. The control registers are accessed in the same access sequence as the 
SDRAM and data is output with the same /CAS latency. However, the 
burst length is always fixed to 1 in accessing the control registers. 

The data set by the mode register set is stored in the mode register 
until the next MRS command is input. The next MRS command can be 
input if both banks are in an inactivation state. When tRSC is elapsed 
after the MRS command is input, the SDRAM can operate with respect to 
new commands. When the MRS command is input, the control registers 
are reset. The operation of switching between disable/enable state in 
accessing the control registers while holding the content of the control 
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register can be performed by controlling signal CRYP with bit AlO of 0 at the 
time of the mode register set of the SDRAM. 

Fig. 32 is a diagram showing a state transition associated with 
cipher control entry/exit of the ScRAM, 
5 When the power is turned on, the state of the ScRAM is changed to 

an initial state 340. Successively, when signal CRYP is set to 1, the state is 
changed to a state 344 which enables cipher control. If signal CRYP is 0, by 
setting bit AlO to 1 by a mode register set command, the state can be 
changed to a cipher control enable state 344, 
10 By setting signal CRYP to 0 in initial state 340 of power on and 

setting 0 to bit All a mode register command, the state is changed to a 
cipher control disable state 342. 

The transition from state 342 to 344 may be made by setting 1 to 
signal CRYPl or by setting 1 to bit AlO by the mode register set command 
15 with signal CRYP being 0. 

Now, the transition from cipher control enable state 344 to cipher 
control disable state 342 will be described. The transition can be made by 
setting 0 to signal CRYP if cipher control enable state 344 is entered by 
setting 1 to signal CRYP. If enable state 344 is entered by setting 0 to 
20 signal CRYP and setting 1 to bit AlO by the mode register set command, the 
transition to disable state 342 is made by setting 0 to bit AlO by the mode 
register set command. 

Fig, 33 is a diagram showing exemplary operation waveforms in 
accessing the control registers, 
25 Referring to Fig. 33, it is assumed that a page of X - #3FFF is 

allocated to the control register access region. Since the SDRAM is set in a 
mode where CAS latency CL equals to 3, the output from the register has a 
timing of CL = 3. 

Here, regardless of a burst length BL which has been set by the 
30 mode register set, the burst length is fixed to 1 for register access. Thus, a 
read/write command and column address must be input in every cycle. 

Figs. 34 to 37 are diagrams shown in conjunction with an address 
map of the control register. 
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Fig. 34 relates to the case where the column address is hOO, hOl, Fig. 
35 to h02. Fig. 36 to h03, h04, h05, hD6, and Fig. 37 to hl3 to h20. 

These X addresses are initially set to hSFFF or hO. 

Next, features of the cipher function of the ScRAM will be described. 
5 The ScRAM is internally provided with an accelerator of a major 

encrsrption method used for ensuring security over the network. The 
ScRAM also supports the functions of a public key cryptosystem used for 
electronic authorization and a secret key cr5rptosystem used for 
transmission/reception of data after authorization. These functions are 
10 performed by a dedicated cipher logic 228 shown in Fig. 27, so that they are 
well suited to a system which requires rapid encryption process with low 
power consumption. 

The encryption method which is supported is similar to that of Fig. 9. 
RAS as well as DES and triple DES are supported respectively as public key 
15 cr5^tosystem and secret key crsrptosystem. Further, the secret key 

cryptosystem supports ECB, CBC, OFB, CFB-64 which are major block 
cipher modes. 

These cryptosystems are used as major cryptosystems not only over a 
general network but also over the Internet. The ScRAM can be used for 

20 major blousers Hke Netscape Communicator or Internet Explorer, and 
S/MIME of an encryption e-mail method. For an electronic commerce 
market with projected expansion, security with these cryptrosystems would 
become more important. The above mentioned cryptosystem is supported 
in wireless appHcation protocol (WAP) which wotdd potentially be apphed to 

25 portable telephones in the future, and thus the ScRAM has sufficient 
adaptability to vaiious systems. 

The ScRAM only performs critical processes for encryption by an 
internal cipher logic to enhance adaptability to apphcations. Namely, the 
processes such as hash, data encoding and padding are performed by a 

30 software as in the conventional case. Thus, the application can enjoy a 
higher degree of freedom. For RSA, the following operations a) and b), 
which will take most of the processing time required for a software process, 
are only performed. 
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a) For rapid electronic authorization by RSA, the following 
operations are performed. 

Power residue operation mod N 

Montgomery multiplication residue operation X * Y * R-^mode 

N 

Residue operation Y mod N 

b) For rapid encryption communication, operations of triple DES, 
DES (CBC, ECB, OFB, CFB-64) are performed. Note that the padding 
process on the final text block portion varies according to standards, it must 
be performed by a software. 

Then, encryption process speed will be described. 

One-chip integration of a logic dedicated to an address process and 
the DRAM enables rapid process and reduction in power consumption. 
Thus, an RSA cipher signature processing time with 1024 bits at a low 
power supply voltage (2.5V system) suitable for portable devices wotdd be 
about 100 ms to 200 ms. Namely, triple DES and DES can respectively 
provides about 60 Mbps and about 180 Mbps. 

The ScRAM controls a cipher logic portion by accessing a specific 
address space, providing pin compatibiKty with respect to a general purpose 
SDRAM. In addition, if the cipher function is disabled, only the function as 
the SDRAM can be used. 

Now, a cipher function controlling method will be described. 

As stated previously, the cipher function of the ScRAM can be 
controlled by accessing the control registers. The control registers can be 
accessed by inputting a prescribed address at the time of mode register set or 
by setting 1 to the terminal supplied with signal CRYP and accessing a 
prescribed address. Here, the address space of defaxilt allocated to the 
control register corresponds to a page of X = hSFFF. If 1 is set to both bits 
AlO and All at the input of the MRS command, the control registers can be 
allocated to a page of X = hO. 

However in a firmware design, it is reqxiired that the space reserved 
for access to the control registers should not be used for other purposes. For 
example, allocation of this space to the appUcation or kernel is inhibited. 
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For the kernel, care must be paid not to be allocated at the time of boot. 

Now, an example of the system design will be described. 

Fig. 38 is a diagram shown in conjunction with a system which can 
control a terminal supphed with signal CRYP. 
5 Referring to Fig. 38, a system is shown which can connect an I/O port 

of a general microcomputer (MCU) to a terminal supplied with signal CRYP. 
In this structure, if the CRYP terminal can be set to 0 before boosting of the 
system, the address space has not yet been allocated to the control register, 
so that the space used for initially loading the program is not restricted if the 
10 region loaded with the program includes X = hSFFF, the CRYP terminal is 
subsequently set to 1 and the address space allocated to the control register 
must be changed to the page of X = hO. 

Figs. 39 and 40 are diagrams shown in conjunction with a system 
which cannot control the CRYP terminal. 
15 Referring to Fig. 39, when value applied to the CRYP terminal is 

fixed to 0, access to the control register is enabled by setting bit AO to Al at 
the input of the mode register set (MRS) of the ScRAM. At the time, the 
space not loaded with the program is selected by bit All. 

Referring to Fig. 40, if the value supplied to the CRYP terminal is 
20 fixed to 1, the access space to the control register is allocated to a page of X = 
hSFFF, so that the program must not be loaded while avoiding this space. 

Fig. 41 is a diagram showing operation waveforms used for 
explaining settings of the control registers. 

Referring to Fig. 41, exemplary signal inputs for setting of the 
25 control registers are shown. The only difference from the DRAM in 

accessing the control registers in that the burst length is 1 regardless of the 
setting of the MRS. Otherwise, the control registers are accessed at the 
same timing and in the same sequence as the DRAM. 

In Fig, 41, by way of example, the address space for accessing the 
30 control register is X = 3FFF. 

First, at a time tl, address X = hSFFF for accessing the control 
register is input. 

Then, at a time t2, a software is reset. 
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At a time t3, a mode setting (1) is performed. In mode setting (1), 
DES-56 is selected as a secret key cryptosystem and a process is performed 
in CBC mode. 

Then, at a time t4, a mode setting (2) is performed. In mode setting 
5 (2), it is set that encryption is performed, address counters of REG and 
REG2 are reset and IV is used as an initial value. 

Between times t5 and t6, a secret key is input. 

Between times t6 and t7, an initial vector IV is input. 

Between times t7 and t8, a plain text of 8 bytes is input and, at tS 
10 after input of the plain text, EOF (End of File) is input. 

At a time t9, reading with respect to a flag region is performed to 
check if a cipher logic is in process or not. 

The check result is read as data signal DQ with CAS latency. 

Next, a secret key cryptosystem supported by the ScRAM will be 
15 described. 

Figs. 42 to 44 are schematic diagrams shown in conjunction with a 
basic unit for an encryption process. 

Fig. 42 relates to DES with a key length of 56 bits, Fig. 43 relates to 
a triple DES method with a key length of 112 bits, and Fig. 44 relates to a 
20 triple DES method with a key length of 168 bits. In the ScRAM, DES and 
triple DES are supported as the secret key cryptosystem. These 
cryptosystems are utihzed by a security socket layer on the Internet, e-mail 
of S/MIME, and a wireless application protocol. Note that, in triple DES, 
DES is subjected to three processes of encrs^ption, decryption and 
25 encryption. 

Figs. 45 to 47 are schematic diagrams shown in conjunction with a 
unit for a decryption process. 

Fig. 45 relates to decryption corresponding to the encryption of Fig. 
42, Fig. 46 relates to decryption corresponding to the encryption of Fig. 43, 
30 and Fig. 47 relates to decrjTption corresponding to the encryption of Fig, 44, 

Next, a cipher utilization mode of a secret key cipher supported by 
the ScRAM will be described. Two modes of ECB and CBC are described by 
way of example. 
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Figs. 48 and 49 are diagrams shown in conjunction with an ECB 

mode. 

Referring to Figs. 48 and 49, the ECB mode is a basic mode, 
corresponding to a basic unit for an encryption/decryption process. For 
encryption, an encryption process is performed on each of blocks Mi (M = Ml, 
M2, M3 • • •) obtained by dividing general data (plain text) M by every 64 bits 
as shown in Fig. 48, using data K which is called a secret key and shared by 
a transmitter and a receiver. Thus, crj^ptograms Ci (C = CI, C2, C3 ) each 
having 64 bits are generated. For decryption, as shown in Fig. 49, 
cryptogram Ci of 65 bits is received and, using the same key data K as that 
for encryption, plain text Mi (M = Mi, M2, M3 • *) is generated. 

Now, the CBC mode will be described. 

Fig. 50 is a diagram shown in conjunction with an operation in the 
CBC mode. 

Referring to Fig. 50, in the CBC mode, encryption is performed on 
blocks Mi each obtained by dividing plain text M by every 64 bits as in the 
case of the ECB mode. Then, an exclusive OR of cryptogram block Ci and 
the next block Mi + 1 is used as an input for the next encryption. This is 
repeated to form a chain. 

On the other hand, for decryption, a result Mi is obtained by 
performing decryption on cipher block text Ci as in the case of the ECB mode. 
An exclusive OR of Ci and the decryption result of cryptogram block Ci + 1 is 
taken to generate output plain text block Mi + 1. This is repeated to form a 
chain. It is noted that, in Fig. 50, the plain text, cryptogram, encryption 
using cipher key K, and decrjT)tion are respectively represented by Mi, Ci ( i 
= 1, 2, Ek, andDk. 

IV (initial vector) represents an initial value used for initial 
encrj^tion and decryption. IVs match on the sides of encryption and 
decryption. Since the value of IV may be known to the third party, secret 
transmission of IV between the transmitter and receiver is not necessary. 
The change in the value of IV results in a different cryptogram from the 
same message. 

Figs. 51 and 52 are schematic diagrams shown in conjunction with 
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encryption and decryption in the CBC mode. 

Referring to Figs. 5 land 52, the length of plain text that can be input 
to the ScRAM at a time is 4k bit, which is a size of register REGl. Thus, in 
processing a plain text having longer length than 4k bits, the control 
register is set such that cryptogram block Ci immediately before has an 
initial value. 

In the embodiments of the present invention, the SDRAM is applied 
to the present invention, by way of example. However, the present 
invention is not limited to appHcation to the SDRAM, and may be appHed to 
an asynchronous DRAM, e.g., EDO (Extended Data Out) DRAM. Further, 
the present invention can be applied to other synchronous DRAMs, 
including a DRAM having a DDR (Double Data Rate) interface or the like. 

Although the present invention has been described and illustrated in 
detail, it is clearly understood that the same is by way of illustration and 
example only and is not to be taken by way of limitation, the spirit and scope 
of the present invention being limited only by the terms of the appended 
claims. 
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